I did some troubleshooting and I can confirm that the pipeline is processing my messages, just isn’t doing what it’s supposed to do.
I change my pipeline rule to set a static value for a field.
rule “parse right timestamp”
when
has_field(“timestamp_orig”)
then
let new_date = parse_date(to_string($message.timestamp_orig));
set_field(“beat_hostname”, “taco”);
end
When I just change the set_field to the variable it reverts back the hostname and not the time stamp.
rule “parse right timestamp”
when
has_field(“timestamp_orig”)
then
let new_date = parse_date(to_string($message.timestamp_orig));
set_field(“beat_hostname”, new_date);
end
This leads me to believe that the parse_date is that part not working.